The Sassor worm has been felt here, though not to the extremes that a friend of mine's University has. It could have been a lot worse. I'm not sure how our desktop people handle patches, but I suspect that using Windows Update and automatic downloading has a lot to do with it. I'm very sure we do not make use of Software Update Services, as we don't have a server that does that.